312-50

312-50 practice questions, page 22 of 25, with answer review and explanations.

Question 106

An engineer is learning to write exploits in C++ and is using the exploit tool Backtrack. The engineer wants to compile the newest C++ exploit and name it calc.exe. Which command would the engineer use to accomplish this?

  1. g++ hackersExploit.cpp -o calc.exe
  2. g++ hackersExploit.py -o calc.exe
  3. g++ -i hackersExploit.pl -o calc.exe
  4. g++ --compile –i hackersExploit.cpp -o calc.exe

Question 107

A recently hired network security associate at a local bank was given the responsibility to perform daily scans of the internal network to look for unauthorized devices. The employee decides to write a script that will scan the network for unauthorized devices every morning at 5:00 am. Which of the following programming languages would most likely be used?

  1. PHP
  2. C#
  3. Python
  4. ASP.NET

Question 108

A tester has been using the msadc.pl attack script to execute arbitrary commands on a Windows NT4 web server. While it is effective, the tester finds it tedious to perform extended functions. On further research, the tester come across a perl script that runs the following msadc functions: Which exploit is indicated by this script?

  1. A buffer overflow exploit
  2. A chained exploit
  3. A SQL injection exploit
  4. A denial of service exploit

Question 109

One advantage of an application-level firewall is the ability to

  1. filter packets at the network level.
  2. filter specific commands, such as http:post.
  3. retain state information for each packet.
  4. monitor tcp handshaking.

Question 110

Which of the statements concerning proxy firewalls is correct?

  1. Proxy firewalls increase the speed and functionality of a network.
  2. Firewall proxy servers decentralize all activity for an application.
  3. Proxy firewalls block network packets from passing to and from a protected network.
  4. Computers establish a connection with a proxy firewall which initiates a new network connection for the client.